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IN THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. An identifier indicating the status of each claim is provided. 

Listing of Claims 

1 . (Currently Amended) A data transmission controlling method for 
controlling transmission of data from data transmitting means to data receiving means over at 
least first and second communication channels, said data transmission controlling method 
comprising the steps of: 

transmitting data encrypted by said data transmitting means to said data receiving 
means over said first communication channel provided for data transmission from said data 
transmitting means to said data receiving means[[,]]; 

wherein prior to transmitting said encrypted data over said first communication 
channel, said data transmitting means encapsulates data to be transmitted from said data 
transmitting means to data receiving means into data capsules i n accordance with a plurality of 
protocols first protocol and a second protocolf r.il: 

wherein said data to be transmitted is first encapsulated in accordance with said 
first protocol and further encapsulated in accordance with said second protocol; 

wherein at least one of said data capsules resulting from the encapsulation is 
encrypted[[,]]; and 

wherein said data transmitting means supplements an encrypted data section with 
a section header containing destination address information; and 
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transmitting restrictive data transmission control information to said data 
receiving means over said second communication channel having a smaller capacity of data 
transmission than said first communication channel, said second communication channel 
including communication channels installed independently of said first communication 
channel[[,]]; 

wherein said restrictive data transmission control information transmitted over 
said second communication channel is operating to allow only intended data receiving means to 
receive the encrypted data, and is configured to substantially simplify decryption of the 
encrypted data transmitted over said first communication channel. 

2. (Currently Amended) A -Thc data transmission controlling method 
according to claim 1 , wherein said second communication channel is a communication channel 
permitting bidirectional communication between said data transmitting means and said data 
receiving means. 

3. (Currently Amended) Ar-The_data transmission controlling method 
according to claim 1 , wherein said data transmitting means performs data encryption using an 
encryption key and wherein said encrypted data from said data transmitting means are decrypted 
by said data receiving means utilizing a decryption key identical to said encryption key used in 
the data encryption. 
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4. (Currently Amended) A The data transmission controlling method 
according to claim 3, wherein said encryption key and said decryption key are session keys for 
encrypting and decrypting information and data. 



5. (Currently Amended) A -Thc data transmission controlling method 
according to claim 4, wherein said session keys are updated at predetermined intervals. 



6. (Currently Amended) ArTTiedata transmission controlling method 
according to claim 4, wherein said data transmitting means and said data receiving means have a 
master key specific to said data receiving means; 

wherein said data transmitting means encrypts said session keys using said master 
key and transmits the encrypted session keys to said data receiving means over either said first 
communication channel or said second communication channel; and 

wherein said data receiving means decrypts said encrypted session keys received 
using said master key. 



7. (Currently Amended) A^ The data transmission controlling method 
according to claim 6, wherein said data transmitting means possesses said session keys 
corresponding to all data receiving means authorized to receive specific information and data; 
and 

wherein said data transmitting means transmits in advance said session keys to 
said data receiving means authorized to receive specific information and data. 



5 of 13 00393559 



PAGE 7/15 * RCVD AT 10/17/2006 5:40:32 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-1/22 1 DNISOTOO * CSID:2125880500 ' DURATION (mm-ss):04-08 



1 0/ 17/2006 17:42 FAX 2125880500 FROMMER LAWRENCE & HAUG + PTO ©008/015 

U.S. Appln. No. 09/309,4 1 2 PATENT 
Reply to Office Action dated July 20, 2006 450100-4879 

8, (Currently Amended) A-The data transmission controlling method 
according to claim 1, wherein said first communication channel is a satellite link permitting 
unidirectional communication from said data transmitting means to said data receiving means; 
and 

wherein said second communication channel is a communication channel 
permitting bidirectional communication between said data transmitting means and said data 
receiving means. 

9. (Currently Amended) A-Thedata transmission controlling method 
according to claim 1, wherein said data receiving means is constituted as an IP router. 



(Currently Amended) A -The data transmission controlling method 
1, wherein said data receiving means is constituted as a bridge. 

1 1 . (Currently Amended) A data transmission system comprising: 

data transmitting means for encrypting and transmitting data; 

data receiving means for receiving said encrypted data from said data transmitting 

means; 

a first communication channel used to transmit said encrypted data from said data 
transmitting means to said data receiving means[[,]]^ 

wherein prior to transmitting said encrypted data over said first communication 
channel, said data transmitting means encapsulates data to be transmitted from said data 



10. 

according to claim 



t 
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transmitting means to data receiving means into data capsules in accordance with a plurality of 
protocols , first protocol and a second protocol- 
wherein said data lo be transmitted is first encapsulated in accordance with said 
first proto col and further encapsulated in accordance with said second protocol; 

wherein at least one of said data capsules resulting from the encapsulation i$ 
encrypted[[,]k and 

wherein said data transmitting means supplements an encrypted data section with 
a section header containing destination address information; and 

a second communication channel having a smaller capacity of data transmission 
than said first communication channel, said second communication channel used to transmit 
restrictive data transmission control information to said data receiving means, and said second 
communication channel including communication channels installed independently of said first 
communication channel^,]]; 

wherein said restrictive data transmission control information transmitted over 
said second communication channel is operating to allow only intended data receiving means to 
receive said encrypted data, and i$ configured to substantially simplify decryption of said 
encrypted data transmitted over said first communication channel. 



1 1 , wherein said data transmitting means performs data encryption using an encryption key and 
wherein said encrypted data from said data transmitting means are decrypted by said data 
receiving means utilizing a decryption key identical to said encryption key used in the data 
encryption. 



12. (Currently Amended) A -The data transmission system according to claim 
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13. (Currently Amended) A -The data transmission system according to claim 
12, wherein said encryption key and said decryption key are session keys for encrypting and 
decrypting information and data. 



14. (Currently Amended) A -Thc data transmission system according to claim 
13, wherein said session keys are updated at predetermined intervals, 

1 5. (Currently Amended) A -The data transmission system according to claim 
13, wherein said data transmitting means and said data receiving means have a master key 
specific to said data receiving means; 

wherein said data transmitting means encrypts said session keys using said master 
key and transmits the encrypted session keys to said data receiving means over either said first 
communication channel or said second communication channel; and 

wherein said data receiving means decrypts said encrypted session keys received 
using said master key. 

16. (Currently Amended) A -Thc data transmission system according to claim 
15, wherein said data transmitting means possesses said session keys corresponding to all data 
receiving means authorized to receive specific information and data; and 

wherein said data transmitting means transmits in advance said session keys to 
said data receiving means authorized to receive specific information and data. 
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17. (Currently Amended) A ^The data transmission system according to claim 

1 1, wherein said first communication channel is a satellite link permitting unidirectional 

communication from said data transmitting means to said data receiving means. 



18. (Currently Amended) A -The data transmission system according to claim 
11, wherein said data receiving means is constituted as an EP router. 



1 9. (Currently Amended) A-Thc_data transmission system according to claim 
1 1 , wherein said data receiving means is constituted as a bridge. 
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